Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/nJ1Io-FtuXJxeQxWFrM0ghGv0GE.roa
File: nJ1Io-FtuXJxeQxWFrM0ghGv0GE.roa (raw, json)
Hash identifier: 1ByfEG9BKCDFzqHTvBWmmW+jtlhitLY/fdMsYqZerWw=
Subject key identifier: 9C:9D:48:A3:E1:6D:B9:72:71:79:0C:56:16:B3:34:82:11:AF:D0:61
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188C84DD5A5D86C066293FAB4F104763E22
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/nJ1Io-FtuXJxeQxWFrM0ghGv0GE.roa
Signing time: Sat 17 Jun 2023 07:42:04 +0000
ROA not before: Sat 17 Jun 2023 07:42:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 193.109.194.0/24 maxlen: 24
85.237.200.0/24 maxlen: 24
85.158.56.0/24 maxlen: 24
85.237.213.0/24 maxlen: 24
185.89.77.0/24 maxlen: 24
185.100.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:4d:d5:a5:d8:6c:06:62:93:fa:b4:f1:04:76:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 17 07:42:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c9d48a3e16db97271790c5616b3348211afd061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:4b:e0:af:5c:3f:a9:07:15:da:a1:0b:1b:
c6:c3:cd:95:a9:4d:dd:14:3f:8c:0b:a1:0a:1d:95:
b4:49:f1:e0:b6:a8:fe:83:3b:20:f3:70:b6:76:e7:
44:73:fb:17:0e:a0:2a:f4:bd:ba:fe:12:8f:07:cc:
da:71:87:34:31:cd:c1:e8:ac:94:5d:d8:c1:0b:78:
0a:0f:f6:82:ef:1d:b3:8d:f9:56:4f:8b:3f:09:ef:
57:01:45:6b:96:31:e0:f5:29:f4:1b:2c:11:99:bb:
b0:20:54:5a:7f:8c:94:a7:ed:71:e3:2c:fc:ce:63:
b0:59:ba:53:bf:62:e3:bb:8f:54:ba:76:4c:77:68:
f3:a0:06:0d:94:71:2a:ce:4d:c0:79:3b:27:54:69:
71:fd:32:bd:36:9e:87:94:54:38:f8:21:2c:19:05:
ef:ab:4d:23:5b:b5:af:ed:b1:6a:93:af:5e:64:ad:
e1:3c:34:48:35:6c:6f:e4:33:95:64:99:a7:b9:9d:
54:81:3e:6a:d3:b9:cf:ae:46:73:0a:6f:ed:f9:5f:
7b:69:72:50:28:a1:5d:a7:a7:7e:8f:35:af:89:5c:
d6:f6:30:28:39:dd:89:68:da:ac:43:35:0a:ff:00:
e0:f5:7f:0d:96:22:3d:4c:80:57:ab:dd:56:5e:8a:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:48:A3:E1:6D:B9:72:71:79:0C:56:16:B3:34:82:11:AF:D0:61
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/nJ1Io-FtuXJxeQxWFrM0ghGv0GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/24
85.237.200.0/24
85.237.213.0/24
185.89.77.0/24
185.100.213.0/24
193.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a7:b0:43:02:59:51:07:1a:63:a1:f8:05:dd:ae:ff:30:98:
08:4c:b1:2c:64:df:03:74:3f:6b:a6:ef:7c:71:83:0f:fc:39:
38:53:ff:85:c3:fc:74:fe:7d:cd:11:84:97:a5:e7:ec:13:cd:
dc:0c:39:db:fb:e8:b1:dc:1f:08:67:2d:d8:d4:b3:29:3e:42:
66:42:b3:48:e3:fa:90:92:ee:7d:36:32:8a:f5:c9:c8:84:54:
7f:31:1b:51:fa:0e:70:42:86:7a:03:e7:cd:38:e4:c8:cd:b2:
c1:f1:98:b9:99:36:88:c0:8f:2d:64:b5:9f:30:48:ab:42:c6:
57:65:a6:d7:8a:2e:d5:f7:99:d5:15:d4:7e:d6:20:94:74:13:
e4:41:35:b8:dc:0f:8f:38:3c:87:14:8e:1c:73:ae:88:0f:07:
40:67:27:b3:be:e3:69:60:07:bd:e9:13:ee:46:2c:19:d1:92:
90:79:61:e9:29:47:f9:26:bd:58:e1:07:ec:8c:2e:f7:d2:6c:
31:a9:33:c7:c1:d8:4c:1d:db:88:b5:74:98:34:0d:92:b8:f7:
08:c3:ac:ea:90:a9:9b:3a:e4:e2:c8:c5:4d:69:3c:f3:40:6e:
f3:db:85:95:27:20:38:cd:58:e5:53:4f:ee:29:b3:d2:ba:22:
f8:d0:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:08 2025 by rpki-client